svillan7

Members
  • Content Count

    2
  • Joined

  • Last visited

Posts posted by svillan7

  1. Not sure what is related or not. Not a computer talent. Beginning of month found my teenager downloading stupid stuff. I immediately deleted all that I could. Closed down, computer would not let me log in. Took it to computer store. I can log in but have Searchnu and Babylon always come up first on Chrome. Tried to remove program. Always comes back. Tried to do regedit and remove there, still came back. Tried to do the about: thing and it would not let me get to the second step. Windows Security says that it cannot turn on my automatic updates. Symantec does not run a regular scan anymore and I cannot figure out why. Every time I use Chrome, my Adobe Flash says that I need to kill the pages and I have to stop Chrome and start over. Today, a random sign popped up, supposedly from Microsoft Security that says that I must immediately close down the computer because it is infested. I ran Malwarebites and Microsoft which says that it is clean. I ran OTL and have included that logs from Malwarebytes and OTL. Please help:(

    I attached these files as well.

    Malwarebytes Anti-Malware 1.61.0.1400

    www.malwarebytes.org

    Database version: v2012.06.24.05

    Windows XP Service Pack 3 x86 NTFS

    Internet Explorer 8.0.6001.18702

    stacey :: WXP-WS01 [administrator]

    6/26/2012 8:17:09 PM

    mbam-log-2012-06-26 (20-17-09).txt

    Scan type: Quick scan

    Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM

    Scan options disabled: P2P

    Objects scanned: 246039

    Time elapsed: 10 minute(s), 57 second(s)

    Memory Processes Detected: 0

    (No malicious items detected)

    Memory Modules Detected: 0

    (No malicious items detected)

    Registry Keys Detected: 0

    (No malicious items detected)

    Registry Values Detected: 0

    (No malicious items detected)

    Registry Data Items Detected: 0

    (No malicious items detected)

    Folders Detected: 0

    (No malicious items detected)

    Files Detected: 0

    (No malicious items detected)

    (end)

    OTL

    OTL logfile created on: 6/26/2012 8:29:52 PM - Run 1

    OTL by OldTimer - Version 3.2.53.0 Folder = C:\Documents and Settings\stacey\Desktop

    Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation

    Internet Explorer (Version = 8.0.6001.18702)

    Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

    1012.89 Mb Total Physical Memory | 500.28 Mb Available Physical Memory | 49.39% Memory free

    2.89 Gb Paging File | 2.20 Gb Available in Paging File | 76.01% Paging File free

    Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

    %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files

    Drive C: | 232.79 Gb Total Space | 105.32 Gb Free Space | 45.24% Space Free | Partition Type: NTFS

    Computer Name: WXP-WS01 | User Name: stacey | Logged in as Administrator.

    Boot Mode: Normal | Scan Mode: Current user | Quick Scan

    Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

    ========== Processes (SafeList) ==========

    PRC - [2012/06/25 01:29:05 | 000,596,992 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\stacey\Desktop\OTL.exe

    PRC - [2012/05/22 05:04:16 | 000,964,032 | ---- | M] (Support.com, Inc.) -- C:\Program Files\Office Depot PC Support Agent\esService.exe

    PRC - [2012/05/22 05:04:16 | 000,587,712 | ---- | M] (Support.com, Inc.) -- C:\Program Files\Office Depot PC Support Agent\escont.exe

    PRC - [2012/02/06 16:25:08 | 000,013,672 | ---- | M] (Intuit Inc.) -- C:\Program Files\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe

    PRC - [2012/02/04 08:52:02 | 001,155,432 | ---- | M] (Intuit Inc.) -- C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe

    PRC - [2012/02/04 07:40:44 | 000,045,056 | ---- | M] (Intuit) -- C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe

    PRC - [2010/11/30 14:20:36 | 000,997,408 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\msseces.exe

    PRC - [2010/11/11 13:26:40 | 000,011,736 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe

    PRC - [2010/08/23 21:21:40 | 000,013,672 | ---- | M] (Intuit Inc.) -- C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe

    PRC - [2010/03/06 05:04:24 | 000,310,224 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe

    PRC - [2009/12/21 14:50:46 | 000,315,392 | ---- | M] (Alcatel-Lucent) -- C:\Program Files\Common Files\Motive\McciServiceHost.exe

    PRC - [2009/11/11 16:17:02 | 000,771,360 | ---- | M] (Apple Inc.) -- C:\Program Files\AirPort\APAgent.exe

    PRC - [2008/11/09 15:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

    PRC - [2008/04/14 07:00:00 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe

    PRC - [2006/09/27 21:33:44 | 000,125,168 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec AntiVirus\VPTray.exe

    PRC - [2006/09/27 21:33:38 | 000,116,464 | ---- | M] (symantec) -- C:\Program Files\Symantec AntiVirus\SavRoam.exe

    PRC - [2006/09/27 21:33:32 | 001,813,232 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec AntiVirus\Rtvscan.exe

    PRC - [2006/09/27 21:33:22 | 000,031,472 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec AntiVirus\DefWatch.exe

    PRC - [2006/07/19 20:26:12 | 000,169,632 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe

    PRC - [2006/07/19 20:26:06 | 000,192,160 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe

    PRC - [2006/07/19 20:26:04 | 000,052,896 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\ccApp.exe

    PRC - [2006/04/11 18:13:38 | 001,160,848 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe

    PRC - [2000/08/08 13:33:12 | 000,036,864 | ---- | M] (Intuit) -- C:\QUICKENW\QWDLLS.EXE

    ========== Modules (No Company Name) ==========

    MOD - [2012/05/24 13:10:58 | 003,417,376 | ---- | M] () -- c:\Program Files\Common Files\Akamai\netsession_win_80c2ffa.dll

    MOD - [2012/05/22 05:04:08 | 000,043,008 | ---- | M] () -- C:\Program Files\Office Depot PC Support Agent\ESResources.dll

    MOD - [2012/03/30 00:01:37 | 000,220,672 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\6e7f1bdc845816dfc797f8002b76b5e8\System.ServiceProcess.ni.dll

    MOD - [2012/03/29 21:32:34 | 000,758,784 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\e30ded9b9c19a264a974b1cc40d7d2cc\System.Runtime.Remoting.ni.dll

    MOD - [2012/03/29 21:32:31 | 000,784,896 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\8b6e9d6171aad3561263ce2cd05c57df\System.EnterpriseServices.ni.dll

    MOD - [2012/03/29 21:32:30 | 000,645,632 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Transactions\dd9dbf82e44454689976a49a9e4ddb6d\System.Transactions.ni.dll

    MOD - [2012/03/29 21:18:08 | 013,006,336 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\17e020ae92d7fab33bcc1c98b25019d0\System.Windows.Forms.ni.dll

    MOD - [2012/03/29 21:17:57 | 006,754,816 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Data\92cccedc7cda413ff6fc6492cb256b58\System.Data.ni.dll

    MOD - [2012/03/29 21:17:45 | 000,973,312 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Configuration\ac18c2dcd06bd2a0589bac94ccae5716\System.Configuration.ni.dll

    MOD - [2012/03/29 21:17:37 | 007,025,664 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Core\713647b987b140a17e3c4ffe4c721f85\System.Core.ni.dll

    MOD - [2012/03/29 21:17:36 | 005,571,584 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Xml\e997d0200c25f7db6bd32313d50b729d\System.Xml.ni.dll

    MOD - [2012/03/29 21:17:32 | 001,651,200 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Drawing\dd57bc19f5807c6dbe8f88d4a23277f6\System.Drawing.ni.dll

    MOD - [2012/03/29 21:17:29 | 009,000,960 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System\964da027ebca3b263a05cadb8eaa20a3\System.ni.dll

    MOD - [2012/03/29 21:17:22 | 014,415,872 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\mscorlib\246f1a5abb686b9dcdf22d3505b08cea\mscorlib.ni.dll

    MOD - [2012/02/04 08:50:48 | 000,268,648 | ---- | M] () -- C:\Program Files\Intuit\QuickBooks 2010\boost_regex-vc90-mt-p-1_33.dll

    MOD - [2011/06/24 22:56:36 | 000,087,328 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

    MOD - [2011/06/24 22:56:14 | 001,241,888 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

    MOD - [2011/04/14 15:35:05 | 000,212,992 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\e0d56c0582316e9ecb4c18186e37217c\System.ServiceProcess.ni.dll

    MOD - [2011/04/14 15:32:57 | 007,949,824 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\f02cf6430a9fc77908a74ab6925cb73c\System.ni.dll

    MOD - [2011/04/14 15:32:48 | 011,490,816 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\62d5f089dd51f18472a7caf1593d9f6b\mscorlib.ni.dll

    MOD - [2011/04/14 15:32:08 | 003,182,592 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll

    MOD - [2011/04/14 15:32:06 | 002,933,248 | ---- | M] () -- C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll

    MOD - [2011/04/14 15:32:06 | 000,425,984 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.dll

    MOD - [2011/04/14 15:32:03 | 000,626,688 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll

    MOD - [2011/04/14 15:32:03 | 000,303,104 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll

    MOD - [2011/04/14 15:32:02 | 000,258,048 | ---- | M] () -- C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll

    MOD - [2011/04/14 15:32:01 | 002,048,000 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.Xml.dll

    MOD - [2011/04/14 15:32:01 | 000,261,632 | ---- | M] () -- C:\WINDOWS\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll

    MOD - [2011/04/14 15:31:59 | 000,114,688 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll

    MOD - [2011/04/14 15:31:54 | 005,025,792 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll

    MOD - [2011/02/06 18:55:29 | 000,854,016 | ---- | M] () -- C:\WINDOWS\assembly\GAC_32\System.Data.SQLite\1.0.61.0__db937bc2d44ff139\System.Data.SQLite.dll

    MOD - [2011/02/06 18:55:28 | 000,476,520 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Map.Reporter\5.0.136.0__7ce6deabcb36a8ea\Intuit.Spc.Map.Reporter.dll

    MOD - [2011/02/06 18:55:28 | 000,409,960 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Map.WindowsFirewallUtilities\5.0.136.0__7ce6deabcb36a8ea\Intuit.Spc.Map.WindowsFirewallUtilities.dll

    MOD - [2011/02/06 18:55:27 | 000,421,224 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Esd.WinClient.Api.Net\3.1.31.0__540d4816ead86321\Intuit.Spc.Esd.WinClient.Api.Net.dll

    MOD - [2011/02/06 18:55:27 | 000,269,672 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Esd.Core\3.1.26.0__540d4816ead86321\Intuit.Spc.Esd.Core.dll

    MOD - [2011/02/06 18:55:27 | 000,046,952 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Esd.WinClient.Application.UpdateServicePlugin\3.1.31.0__540d4816ead86321\Intuit.Spc.Esd.WinClient.Application.UpdateServicePlugin.dll

    MOD - [2011/02/06 18:55:27 | 000,023,912 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Esd.WinClient.Application.UpdateService\1.0.0.0__540d4816ead86321\Intuit.Spc.Esd.WinClient.Application.UpdateService.dll

    MOD - [2011/02/06 18:55:27 | 000,018,792 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Esd.WinClient.Ipc.Remoting.UpdateServiceWorker\3.1.31.0__540d4816ead86321\Intuit.Spc.Esd.WinClient.Ipc.Remoting.UpdateServiceWorker.dll

    MOD - [2011/02/06 18:55:27 | 000,012,136 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Esd.WinClient.Application.UpdateService.PluginContract\1.0.0.0__540d4816ead86321\Intuit.Spc.Esd.WinClient.Application.UpdateService.PluginContract.dll

    MOD - [2011/02/06 18:55:26 | 000,121,704 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Esd.Client.BusinessLogic\3.1.31.0__540d4816ead86321\Intuit.Spc.Esd.Client.BusinessLogic.dll

    MOD - [2011/02/06 18:55:26 | 000,120,168 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Esd.Client.DataAccess\3.1.31.0__540d4816ead86321\Intuit.Spc.Esd.Client.DataAccess.dll

    MOD - [2011/02/06 18:55:26 | 000,070,504 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Esd.Client.Common\3.1.31.0__540d4816ead86321\Intuit.Spc.Esd.Client.Common.dll

    MOD - [2011/02/06 18:41:06 | 000,755,712 | ---- | M] () -- C:\WINDOWS\assembly\GAC_32\System.Data.SQLite\1.0.56.0__28c9bcd4dddc48a1\System.Data.SQLite.dll

    MOD - [2011/02/06 18:41:05 | 001,058,304 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Map.WindowsFirewallUtilities\4.0.114.0__7ce6deabcb36a8ea\Intuit.Spc.Map.WindowsFirewallUtilities.dll

    MOD - [2011/02/06 18:41:05 | 000,471,040 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Map.Reporter\4.0.114.0__7ce6deabcb36a8ea\Intuit.Spc.Map.Reporter.dll

    MOD - [2011/02/06 18:41:05 | 000,270,336 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\log4net\1.2.10.0__1b44e1d426115821\log4net.dll

    MOD - [2011/02/06 18:41:04 | 000,458,752 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Foundations.Portability\3.1.2.2__540d4816ead86321\Intuit.Spc.Foundations.Portability.dll

    MOD - [2011/02/06 18:41:04 | 000,065,536 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Foundations.Primary.ExceptionHandling\3.1.2.2__540d4816ead86321\Intuit.Spc.Foundations.Primary.ExceptionHandling.dll

    MOD - [2011/02/06 18:41:04 | 000,045,056 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Foundations.Primary.Logging\3.1.2.2__540d4816ead86321\Intuit.Spc.Foundations.Primary.Logging.dll

    MOD - [2011/02/06 18:41:03 | 000,073,728 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Foundations.Primary.Config\3.1.2.2__540d4816ead86321\Intuit.Spc.Foundations.Primary.Config.dll

    MOD - [2011/02/06 18:41:02 | 000,047,392 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Esd.WinClient.Application.UpdateServicePlugin\2.1.72.22__540d4816ead86321\Intuit.Spc.Esd.WinClient.Application.UpdateServicePlugin.dll

    MOD - [2011/02/06 18:41:01 | 000,402,208 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Esd.WinClient.Api.Net\2.1.72.22__540d4816ead86321\Intuit.Spc.Esd.WinClient.Api.Net.dll

    MOD - [2011/02/06 18:41:01 | 000,238,368 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Esd.Core\2.0.145.4__540d4816ead86321\Intuit.Spc.Esd.Core.dll

    MOD - [2011/02/06 18:41:01 | 000,018,720 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Esd.WinClient.Ipc.Remoting.UpdateServiceWorker\2.1.72.22__540d4816ead86321\Intuit.Spc.Esd.WinClient.Ipc.Remoting.UpdateServiceWorker.dll

    MOD - [2011/02/06 18:40:59 | 000,120,608 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Esd.Client.DataAccess\2.1.72.22__540d4816ead86321\Intuit.Spc.Esd.Client.DataAccess.dll

    MOD - [2011/02/06 18:40:58 | 000,130,848 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Esd.Client.BusinessLogic\2.1.72.22__540d4816ead86321\Intuit.Spc.Esd.Client.BusinessLogic.dll

    MOD - [2011/02/06 18:40:58 | 000,072,992 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Esd.Client.Common\2.1.72.22__540d4816ead86321\Intuit.Spc.Esd.Client.Common.dll

    MOD - [2002/05/03 16:40:32 | 000,094,274 | ---- | M] () -- C:\WINDOWS\system32\HPBHEALR.DLL

    MOD - [2000/08/08 13:33:06 | 000,102,400 | ---- | M] () -- C:\QUICKENW\qcomutil.dll

    ========== Win32 Services (SafeList) ==========

    SRV - [2012/06/25 01:42:01 | 000,257,224 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)

    SRV - [2012/05/24 13:10:58 | 003,417,376 | ---- | M] () [Auto | Running] -- c:\program files\common files\akamai/netsession_win_80c2ffa.dll -- (Akamai)

    SRV - [2012/05/22 05:04:16 | 000,964,032 | ---- | M] (Support.com, Inc.) [Auto | Running] -- C:\Program Files\Office Depot PC Support Agent\esService.exe -- (Office Depot PC Support Agent)

    SRV - [2012/02/06 16:25:08 | 000,013,672 | ---- | M] (Intuit Inc.) [Auto | Running] -- C:\Program Files\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe -- (IntuitUpdateServiceV4)

    SRV - [2012/02/04 07:40:44 | 000,045,056 | ---- | M] (Intuit) [Auto | Running] -- C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe -- (QBCFMonitorService)

    SRV - [2010/11/11 13:26:40 | 000,011,736 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe -- (MsMpSvc)

    SRV - [2010/08/23 21:21:40 | 000,013,672 | ---- | M] (Intuit Inc.) [Auto | Running] -- C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe -- (IntuitUpdateService)

    SRV - [2010/02/19 14:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)

    SRV - [2009/12/21 14:50:46 | 000,315,392 | ---- | M] (Alcatel-Lucent) [Auto | Running] -- C:\Program Files\Common Files\Motive\McciServiceHost.exe -- (McciServiceHost)

    SRV - [2009/07/23 21:10:38 | 000,061,440 | ---- | M] (Intuit Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe -- (QBFCService)

    SRV - [2008/11/09 15:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService)

    SRV - [2006/09/27 21:33:38 | 000,116,464 | ---- | M] (symantec) [Auto | Running] -- C:\Program Files\Symantec AntiVirus\SavRoam.exe -- (SavRoam)

    SRV - [2006/09/27 21:33:32 | 001,813,232 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Symantec AntiVirus\Rtvscan.exe -- (Symantec AntiVirus)

    SRV - [2006/09/27 21:33:22 | 000,031,472 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Symantec AntiVirus\DefWatch.exe -- (DefWatch)

    SRV - [2006/09/02 17:36:33 | 002,528,960 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_1.EXE -- (LiveUpdate)

    SRV - [2006/08/07 17:03:02 | 000,214,720 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe -- (SNDSrvc)

    SRV - [2006/07/19 20:26:12 | 000,169,632 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe -- (ccSetMgr)

    SRV - [2006/07/19 20:26:06 | 000,192,160 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe -- (ccEvtMgr)

    SRV - [2006/06/30 17:06:46 | 000,016,447 | ---- | M] (NetSupport Ltd) [Auto | Stopped] -- C:\Program Files\NetSupport Manager\client32.exe -- (Client32)

    SRV - [2006/04/11 18:13:38 | 001,160,848 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe -- (SPBBCSvc)

    ========== Driver Services (SafeList) ==========

    OTL EXTRAS

    OTL Extras logfile created on: 6/26/2012 8:29:52 PM - Run 1

    OTL by OldTimer - Version 3.2.53.0 Folder = C:\Documents and Settings\stacey\Desktop

    Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation

    Internet Explorer (Version = 8.0.6001.18702)

    Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

    1012.89 Mb Total Physical Memory | 500.28 Mb Available Physical Memory | 49.39% Memory free

    2.89 Gb Paging File | 2.20 Gb Available in Paging File | 76.01% Paging File free

    Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

    %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files

    Drive C: | 232.79 Gb Total Space | 105.32 Gb Free Space | 45.24% Space Free | Partition Type: NTFS

    Computer Name: WXP-WS01 | User Name: stacey | Logged in as Administrator.

    Boot Mode: Normal | Scan Mode: Current user | Quick Scan

    Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

    ========== Extra Registry (SafeList) ==========

    ========== File Associations ==========

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

    .bat [@ = Reg Error: Key error.] -- Reg Error: Key error. File not found

    .chm [@ = Reg Error: Key error.] -- Reg Error: Key error. File not found

    .cmd [@ = Reg Error: Key error.] -- Reg Error: Key error. File not found

    .com [@ = Reg Error: Key error.] -- Reg Error: Key error. File not found

    .cpl [@ = Reg Error: Key error.] -- Reg Error: Key error. File not found

    .exe [@ = Reg Error: Key error.] -- Reg Error: Key error. File not found

    .hlp [@ = Reg Error: Key error.] -- Reg Error: Key error. File not found

    .hta [@ = Reg Error: Key error.] -- Reg Error: Key error. File not found

    .inf [@ = Reg Error: Key error.] -- Reg Error: Key error. File not found

    .ini [@ = Reg Error: Value error.] -- Reg Error: Key error. File not found

    .jse [@ = Reg Error: Key error.] -- Reg Error: Key error. File not found

    .pif [@ = Reg Error: Key error.] -- Reg Error: Key error. File not found

    .scr [@ = Reg Error: Key error.] -- Reg Error: Key error. File not found

    .txt [@ = Reg Error: Value error.] -- Reg Error: Key error. File not found

    .vbe [@ = Reg Error: Key error.] -- Reg Error: Key error. File not found

    .wsf [@ = Reg Error: Key error.] -- Reg Error: Key error. File not found

    .wsh [@ = Reg Error: Key error.] -- Reg Error: Key error. File not found

    [HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]

    .html [@ = htmlfile] -- Reg Error: Key error. File not found

    ========== Shell Spawning ==========

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

    batfile [open] -- "%1" %*

    cmdfile [open] -- "%1" %*

    comfile [open] -- "%1" %*

    cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*

    exefile [open] -- "%1" %*

    piffile [open] -- "%1" %*

    regfile [merge] -- Reg Error: Key error.

    scrfile [config] -- "%1"

    scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

    scrfile [open] -- "%1" /S

    txtfile [edit] -- Reg Error: Key error.

    Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

    Directory [bridge] -- C:\Program Files\Adobe\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)

    Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

    Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)

    Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)

    Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

    ========== Security Center Settings ==========

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

    "FirstRunDisabled" = 1

    "AntiVirusDisableNotify" = 0

    "FirewallDisableNotify" = 0

    "UpdatesDisableNotify" = 0

    "AntiVirusOverride" = 1

    "FirewallOverride" = 0

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

    "DisableMonitoring" = 1

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

    ========== System Restore Settings ==========

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]

    "DisableSR" = 0

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]

    "Start" = 0

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]

    "Start" = 2

    ========== Firewall Settings ==========

    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

    "EnableFirewall" = 1

    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications]

    "Enabled" = 1

    "AllowUserPrefMerge" = 1

    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications\List]

    "%ProgramFiles%\Microsoft ActiveSync\CeAppMgr.exe:LocalSubnet:Enabled:ActiveSync Application Manager" = %ProgramFiles%\Microsoft ActiveSync\CeAppMgr.exe:LocalSubnet:Enabled:ActiveSync Application Manager

    "%ProgramFiles%\Microsoft ActiveSync\WCESMgr.exe:LocalSubnet:Enabled:ActiveSync Application" = %ProgramFiles%\Microsoft ActiveSync\WCESMgr.exe:LocalSubnet:Enabled:ActiveSync Application

    "%ProgramFiles%\Microsoft ActiveSync\WCESComm.exe:LocalSubnet:Enabled:ActiveSync Connection Manager" = %ProgramFiles%\Microsoft ActiveSync\WCESComm.exe:LocalSubnet:Enabled:ActiveSync Connection Manager

    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts]

    "Enabled" = 1

    "AllowUserPrefMerge" = 1

    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts\List]

    "135:TCP:*:Enabled:Offer Remote Assistance - Port" = 135:TCP:*:Enabled:Offer Remote Assistance - Port

    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\FileAndPrint]

    "Enabled" = 1

    "RemoteAddresses" = LocalSubnet

    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\RemoteDesktop]

    "Enabled" = 1

    "RemoteAddresses" = *

    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

    "EnableFirewall" = 1

    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\AuthorizedApplications]

    "AllowUserPrefMerge" = 1

    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\GloballyOpenPorts]

    "AllowUserPrefMerge" = 1

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

    "EnableFirewall" = 0

    "DoNotAllowExceptions" = 0

    "DisableNotifications" = 1

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

    "3389:TCP" = 3389:TCP:*:Enabled:@xpsp2res.dll,-22009

    "427:TCP" = 427:TCP:LocalSubNet:Enabled:SLP_Port(427)_TCP

    "427:UDP" = 427:UDP:LocalSubNet:Enabled:SLP_Port(427)_UDP

    "139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004

    "445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005

    "137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001

    "138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

    "EnableFirewall" = 1

    "DoNotAllowExceptions" = 0

    "DisableNotifications" = 1

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

    "3389:TCP" = 3389:TCP:*:Enabled:@xpsp2res.dll,-22009

    "427:TCP" = 427:TCP:LocalSubNet:Enabled:SLP_Port(427)_TCP

    "427:UDP" = 427:UDP:LocalSubNet:Enabled:SLP_Port(427)_UDP

    "139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004

    "445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005

    "137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001

    "138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002

    ========== Authorized Applications List ==========

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

    "C:\Program Files\NetSupport Manager\client32.exe" = C:\Program Files\NetSupport Manager\client32.exe:*:Enabled:NetSupport Client -- (NetSupport Ltd)

    "D:\setup\hpznui01.exe" = D:\setup\hpznui01.exe:*:Enabled:hpznui01.exe

    "C:\Program Files\HP\Digital Imaging\{624E7452-BA43-4f55-B9D5-FC75EEA0808B}\setup\hpznui01.exe" = C:\Program Files\HP\Digital Imaging\{624E7452-BA43-4f55-B9D5-FC75EEA0808B}\setup\hpznui01.exe:*:Enabled:hpznui01.exe -- (Hewlett-Packard)

    "C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe -- (Hewlett-Packard Co.)

    "C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe" = C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe -- (Hewlett-Packard Co.)

    "C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Co.)

    "C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe -- (Hewlett-Packard)

    "C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe -- (Hewlett-Packard Co.)

    "C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe -- (Hewlett-Packard)

    "C:\Program Files\HP\Digital Imaging\bin\hpofxs08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpofxs08.exe:*:Enabled:hpofxs08.exe -- (Hewlett-Packard Co.)

    "C:\Program Files\HP\Digital Imaging\bin\hpqfxt08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqfxt08.exe:*:Enabled:hpqfxt08.exe -- (TODO: <Company name>)

    "C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe -- (Hewlett-Packard Co.)

    "C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe -- (Hewlett-Packard Co.)

    "C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe -- (Hewlett-Packard Co.)

    "C:\Program Files\HP\HP Software Update\HPWUCli.exe" = C:\Program Files\HP\HP Software Update\HPWUCli.exe:*:Enabled:hpwucli.exe -- (Hewlett-Packard)

    "C:\Program Files\HP\Digital Imaging\Smart Web Printing\SmartWebPrintExe.exe" = C:\Program Files\HP\Digital Imaging\Smart Web Printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe

    "C:\Documents and Settings\stacey\My Documents\My Music\iTunes\iTunes Music\Music\BearShare Applications\BearShare\BearShare.exe" = C:\Documents and Settings\stacey\My Documents\My Music\iTunes\iTunes Music\Music\BearShare Applications\BearShare\BearShare.exe:*:Enabled:BearShare

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

    "C:\Program Files\Intuit\QuickBooks 2010\QBDBMgrN.exe" = C:\Program Files\Intuit\QuickBooks 2010\QBDBMgrN.exe:*:Enabled:QuickBooks 2010 Data Manager -- (Intuit, Inc.)

    "D:\setup\hpznui01.exe" = D:\setup\hpznui01.exe:*:Enabled:hpznui01.exe

    "C:\Program Files\HP\Digital Imaging\{624E7452-BA43-4f55-B9D5-FC75EEA0808B}\setup\hpznui01.exe" = C:\Program Files\HP\Digital Imaging\{624E7452-BA43-4f55-B9D5-FC75EEA0808B}\setup\hpznui01.exe:*:Enabled:hpznui01.exe -- (Hewlett-Packard)

    "C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe -- (Hewlett-Packard Co.)

    "C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe" = C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe -- (Hewlett-Packard Co.)

    "C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Co.)

    "C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe -- (Hewlett-Packard)

    "C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe -- (Hewlett-Packard Co.)

    "C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe -- (Hewlett-Packard)

    "C:\Program Files\HP\Digital Imaging\bin\hpofxs08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpofxs08.exe:*:Enabled:hpofxs08.exe -- (Hewlett-Packard Co.)

    "C:\Program Files\HP\Digital Imaging\bin\hpqfxt08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqfxt08.exe:*:Enabled:hpqfxt08.exe -- (TODO: <Company name>)

    "C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe -- (Hewlett-Packard Co.)

    "C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe -- (Hewlett-Packard Co.)

    "C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe -- (Hewlett-Packard Co.)

    "C:\Program Files\HP\HP Software Update\HPWUCli.exe" = C:\Program Files\HP\HP Software Update\HPWUCli.exe:*:Enabled:hpwucli.exe -- (Hewlett-Packard)

    "C:\Program Files\HP\Digital Imaging\Smart Web Printing\SmartWebPrintExe.exe" = C:\Program Files\HP\Digital Imaging\Smart Web Printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe

    "C:\Program Files\Chapura\Chapura SyncManager\SyncMgr.exe" = C:\Program Files\Chapura\Chapura SyncManager\SyncMgr.exe:*:Enabled:Chapura SyncManager

    "C:\Program Files\Palm\Hotsync.exe" = C:\Program Files\Palm\Hotsync.exe:*:Enabled:HotSync® Manager Application

    "C:\Program Files\Common Files\Motive\McciServiceHost.exe" = C:\Program Files\Common Files\Motive\McciServiceHost.exe:*:Enabled:McciServiceHost -- (Alcatel-Lucent)

    "C:\Documents and Settings\stacey\My Documents\My Music\iTunes\iTunes Music\Automatically Add to iTunes\BitLord\BitLord.exe" = C:\Documents and Settings\stacey\My Documents\My Music\iTunes\iTunes Music\Automatically Add to iTunes\BitLord\BitLord.exe:*:Disabled:BitLord

    "C:\Documents and Settings\stacey\My Documents\My Music\iTunes\iTunes Music\Music\BearShare Applications\BearShare\BearShare.exe" = C:\Documents and Settings\stacey\My Documents\My Music\iTunes\iTunes Music\Music\BearShare Applications\BearShare\BearShare.exe:*:Enabled:BearShare

    "C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe" = C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe:LocalSubNet:Disabled:Intuit Update Shared Downloads Server -- (Intuit Inc.)

    "C:\Program Files\NetSupport Manager\client32.exe" = C:\Program Files\NetSupport Manager\client32.exe:*:Enabled:NetSupport Client -- (NetSupport Ltd)

    ========== HKEY_LOCAL_MACHINE Uninstall List ==========

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

    "{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86

    "{03A7C57A-B2C8-409b-92E5-524A0DFD0DD3}" = Status

    "{05BDC796-3451-4F81-B91D-E98F7ADA76C2}" = TurboTax 2010 WinPerTaxSupport

    "{06A9E630-DBA6-4D92-9DE7-A235AA6496C7}" = QuickBooks

    "{0700E22B-A422-40A5-BD20-04BF618CA0F9}" = QuickBooks Pro 2010

    "{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}" = Windows Live ID Sign-in Assistant

    "{087A66B8-1F0F-4a8d-A649-0CFE276AA7C0}" = WebReg

    "{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86

    "{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}" = Adobe Community Help

    "{0E64B098-8018-4256-BA23-C316A43AD9B0}" = QuickTime

    "{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86

    "{102CBC47-7FDE-4E6C-8A3A-67B79833FAC8}" = BPDSoftware_Ini

    "{11B2F891-91C8-47ce-945A-A91003EA27FB}" = BPDSoftware

    "{15FEDA5F-141C-4127-8D7E-B962D1742728}" = Adobe Photoshop CS5

    "{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer

    "{18AB082B-6584-4F74-8ABC-D5935CF46E4C}" = 8500A909_eDocs

    "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

    "{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer

    "{23B8A91D-680B-462B-87AD-3D70F7341731}" = iTunes

    "{2656D0AB-9EA4-4C58-A117-635F3CED8B93}" = Microsoft UI Engine

    "{26A24AE4-039D-4CA4-87B4-2F83216016FF}" = Java 6 Update 24

    "{277D7D24-A57F-4762-AB86-A646656A25FA}" = BodyMedia SYNC

    "{29521505-F489-4822-ADFA-32C6DEE4F114}" = TurboTax 2008 WinPerUserEducation

    "{2A329FB6-389D-4396-A974-29656D6864AE}" = MarketResearch

    "{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}" = BufferChm

    "{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}" = HP Update

    "{33CFCF98-F8D6-4549-B469-6F4295676D83}" = Symantec AntiVirus

    "{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP

    "{3700194C-C5DD-439A-BE06-A66960CA4C70}" = MSVCSetup

    "{3782EC09-4000-475E-8A59-9CABD6F03B4C}" = TurboTax 2010 WinPerFedFormset

    "{388E4B09-3E71-4649-8921-F44A3A2954A7}" = Microsoft Visual Studio 2005 Tools for Office Runtime

    "{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile

    "{40184457-4514-4B18-84A8-6BB8A3AB6A81}" = AirPort

    "{432A850B-3558-4BFF-B1F9-30626835B523}" = BPD_DSWizards

    "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater

    "{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter

    "{4D304678-738E-42a0-931A-2B022F49DEB8}" = TrayApp

    "{4E7C28C7-D5DA-4E9F-A1CA-60490B54AE35}" = UnloadSupport

    "{4F2FCCCF-29F3-44B9-886F-6D16F8417522}" = TurboTax 2010 wrapper

    "{50120000-1105-0000-0000-0000000FF1CE}" = Microsoft Office 2007 Primary Interop Assemblies

    "{57F60D52-630B-43C5-BD20-176F5CD4EED6}" = bpd_scan

    "{5866F83F-5347-4324-A15E-070502A65866}" = TurboTax 2010 WinBizReleaseEngine

    "{5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}" = Google Earth

    "{624E7452-BA43-4f55-B9D5-FC75EEA0808B}" = Officejet Pro 8500 A909 Series

    "{6334BBB0-8A2E-4679-B845-9CE27E72DBDA}" = TurboTax 2010 WinBizTaxSupport

    "{6346B2AE-0DBB-45A3-9ECA-D23CAC27AB7E}" = TurboTax 2011 wiliper

    "{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86

    "{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2

    "{676981B7-A2D9-49D0-9F4C-03018F131DA9}" = DocProc

    "{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD DX

    "{6EED4269-588D-45b8-A80C-26A9CA62EE4E}" = HPSSupply

    "{6F340107-F9AA-47C6-B54C-C3A19F11553F}" = Hewlett-Packard ACLM.NET v1.1.0.0

    "{70632C41-BDAC-4128-9FBF-287F9FF53DE5}" = TurboTax 2010 wiliper

    "{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK

    "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable

    "{73D793AB-43E8-4683-A28C-43CBD22331B3}" = TurboTax 2010 wilpbpm

    "{7570F1CA-016D-46AC-B586-CD74645EFB52}" = TurboTax 2008 WinPerFedFormset

    "{774088D4-0777-4D78-904D-E435B318F5D2}" = Microsoft Antimalware

    "{77A776C4-D10F-416D-88F0-53F2D9DCD9B3}" = Microsoft Security Client

    "{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour

    "{7BB045C3-D5E4-4620-B536-DC11AACD5942}" = Broadcom Management Programs

    "{846B5DED-DC8C-4E1A-B5B4-9F5B39A0CACE}" = HPDiagnosticAlert

    "{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570

    "{87A9A9A9-FAB7-4224-9328-0FA2058C0FD5}" = Network

    "{88214092-836F-4E22-A5AC-569AC9EE6A0F}" = TurboTax 2008 WinPerReleaseEngine

    "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight

    "{8E1CB0F1-67BF-4052-AA23-FA22E94804C1}" = InstallIQ Updater

    "{90120000-0010-0409-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (English) 12

    "{90120000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2007

    "{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)

    "{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)

    "{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007

    "{90120000-0015-0409-0000-0000000FF1CE}_PROPLUS_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)

    "{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007

    "{90120000-0016-0409-0000-0000000FF1CE}_PROPLUS_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)

    "{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007

    "{90120000-0018-0409-0000-0000000FF1CE}_PROPLUS_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)

    "{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007

    "{90120000-0019-0409-0000-0000000FF1CE}_PROPLUS_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)

    "{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007

    "{90120000-001A-0409-0000-0000000FF1CE}_PROPLUS_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)

    "{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007

    "{90120000-001B-0409-0000-0000000FF1CE}_PROPLUS_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)

    "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007

    "{90120000-001F-0409-0000-0000000FF1CE}_PROPLUS_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)

    "{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007

    "{90120000-001F-040C-0000-0000000FF1CE}_PROPLUS_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)

    "{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007

    "{90120000-001F-0C0A-0000-0000000FF1CE}_PROPLUS_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)

    "{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007

    "{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007

    "{90120000-0044-0409-0000-0000000FF1CE}_PROPLUS_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)

    "{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007

    "{90120000-006E-0409-0000-0000000FF1CE}_PROPLUS_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)

    "{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007

    "{90120000-0115-0409-0000-0000000FF1CE}_PROPLUS_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)

    "{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007

    "{90120000-0117-0409-0000-0000000FF1CE}_PROPLUS_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)

    "{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86

    "{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting

    "{95140000-004E-0409-0000-0000000FF1CE}" = Microsoft Outlook Social Connector 32-bit

    "{95140000-007C-0409-0000-0000000FF1CE}" = Microsoft Outlook Social Connector Provider for Facebook 32-bit

    "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

    "{9CCCFD9C-248F-47FE-9496-1680E3E5C163}" = Scan

    "{9D59AC32-B0FA-4CD7-A2EC-4B57C06CD9D9}" = Dell Backup and Recovery Manager

    "{9E5A03E3-6246-4920-9630-0527D5DA9B07}" = AnswerWorks 5.0 English Runtime

    "{9FA23C53-D512-488C-BD99-4124F6DD2087}" = VersaCheck 2005 Gold

    "{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR

    "{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2

    "{A421348C-43DF-46F8-8024-7ABC9F92A682}" = HP Printer Quality Research Study

    "{A436F67F-687E-4736-BD2B-537121A804CF}" = HP Product Detection

    "{A525E00B-6609-442E-9DCD-64453C233E8D}" = TurboTax 2010 WinPerReleaseEngine

    "{A78FE97A-C0C8-49CE-89D0-EDD524A17392}" = PDF Settings CS5

    "{A80FA752-C491-4ED9-ABF0-4278563160B2}" = 32 Bit HP CIO Components Installer

    "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper

    "{AC13BA3A-336B-45a4-B3FE-2D3058A7B533}" = Toolbox

    "{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.3)

    "{AE29CC62-C835-40FD-99C6-292F90D58DF8}" = TurboTax 2010 widiper

    "{B1DB1AD8-C07E-4052-81A1-D2930232BA70}" = TurboTax 2008 wrapper

    "{B23726CF-68BF-41A6-A4EB-72F12F87FE05}" = TurboTax 2008 WinPerTaxSupport

    "{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0

    "{B495547C-01F8-4836-A2E6-749B5F3EA691}" = 8500A909_Help

    "{BAF78226-3200-4DB4-BE33-4D922A799840}" = Windows Presentation Foundation

    "{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2

    "{C29C1940-CB85-4F3B-906C-33FEE0E67103}" = DocMgr

    "{C3ADD937-FD5F-4CC6-AE15-AEDEE2A20165}" = TurboTax 2010 wrapper

    "{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant

    "{C6579A65-9CAE-4B31-8B6B-3306E0630A66}" = Apple Software Update

    "{C779648B-410E-4BBA-B75B-5815BCEFE71D}" = Safari

    "{CAF5B770-082F-40C4-853D-3973BB81BDAA}" = TurboTax 2011 WinPerTaxSupport

    "{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1

    "{CD8C5C7F-7C58-4F85-8977-A6C08C087912}" = MPM

    "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1

    "{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86

    "{D5DEF057-D3BC-499f-99EE-884ED429B6D1}" = 8500A909g

    "{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86

    "{DA8BF070-1358-4a30-A68F-21E0E9421AEF}" = ProductContext

    "{DE3A9DC5-9A5D-6485-9662-347162C7E4CA}" = Adobe Media Player

    "{E463E171-4082-4744-A466-F7CBE8502789}" = TurboTax 2011 WinPerReleaseEngine

    "{E6C0F926-446B-4450-8D15-4405A9431EB7}" = TurboTax 2010 WinBizFedFormset

    "{E6D9BC25-0DBC-4368-8E4A-7DEE80661CD9}" = TurboTax 2008 WinPerProgramHelp

    "{EB879750-CCBD-4013-BFD5-0294D4DA5BD0}" = Apple Application Support

    "{ED5B9B0F-BB12-4919-B58D-9F7A57A1D296}" = TaxWise 2010

    "{EE556A3E-EB37-4392-9637-BAA8EC2F47FA}" = TurboTax 2011 wrapper

    "{EEEB604C-C1A7-4f8c-B03F-56F9C1C9C45F}" = Fax

    "{EF9E56EE-0243-4BAD-88F4-5E7508AA7D96}" = Destination Component

    "{EFC04D3F-A152-47E7-8517-EE0F6201AFEF}" = Apple Mobile Device Support

    "{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard

    "{F769B78E-FF0E-4db5-95E2-9F4C8D6352FE}" = DeviceDiscovery

    "{FAD3D68B-2F9C-459B-AA79-C04B9090FD72}" = TurboTax 2011 WinPerFedFormset

    "Adobe AIR" = Adobe AIR

    "Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX

    "Akamai" = Akamai NetSession Interface Service

    "ASIO4ALL" = ASIO4ALL

    "ATT-SST-UversePortal" = AT&T Portal

    "BitLord" = BitLord 1.1

    "BMR-screensaver Screensaver" = BMR-screensaver Screensaver

    "chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help

    "com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player

    "Google Chrome" = Google Chrome

    "HDMI" = Intel® Graphics Media Accelerator Driver

    "HP Document Manager" = HP Document Manager 2.0

    "HP Imaging Device Functions" = HP Imaging Device Functions 12.0

    "HP Solution Center & Imaging Support Tools" = HP Solution Center 13.0

    "HPExtendedCapabilities" = HP Customer Participation Program 12.0

    "HPOCR" = OCR Software by I.R.I.S. 12.0

    "ie8" = Windows Internet Explorer 8

    "InstallShield_{277D7D24-A57F-4762-AB86-A646656A25FA}" = BodyMedia SYNC

    "Intelli-studio" = SAMSUNG Intelli-studio

    "Learning by Doing 1.0" = Learning by Doing 1.0

    "LiveUpdate" = LiveUpdate 3.1 (Symantec Corporation)

    "Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.61.0.1400

    "Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1

    "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1

    "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile

    "Microsoft Security Client" = Microsoft Security Essentials

    "Microsoft Visual Studio 2005 Tools for Office Runtime" = Microsoft Visual Studio 2005 Tools for Office Runtime

    "MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP

    "NetSupport Manager" = NetSupport Manager

    "Office Depot PC Support Agent" = Office Depot PC Support Agent

    "PROPLUS" = Microsoft Office Professional Plus 2007

    "Quicken 2001 Basic" = Quicken 2001 Basic

    "Rhapsody" = Rhapsody

    "Shop for HP Supplies" = Shop for HP Supplies

    "TurboTax 2008" = TurboTax 2008

    "TurboTax 2010" = TurboTax 2010

    "TurboTax 2011" = TurboTax 2011

    "TurboTax Business 2010" = TurboTax Business 2010

    "USB_AUDIO_DEusb-audio.deNumarkNC06" = MixDeck USB Audio driver

    "vfd-adk" = VideoFileDownload

    "Windows Media Format Runtime" = Windows Media Format 11 runtime

    "Windows Media Player" = Windows Media Player 11

    "WinGimp-2.0_is1" = Gimp 2.6.2 Debug

    "WMFDist11" = Windows Media Format 11 runtime

    "wmp11" = Windows Media Player 11

    "Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0

    "XpsEPSC" = XML Paper Specification Shared Components Pack 1.0

    "Yahoo! Companion" = Yahoo! Toolbar

    "Yahoo! Software Update" = Yahoo! Software Update

    "YTdetect" = Yahoo! Detect

    ========== HKEY_CURRENT_USER Uninstall List ==========

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

    "Akamai" = Akamai NetSession Interface

    ========== Last 20 Event Log Errors ==========

    [ Application Events ]

    Error - 6/25/2012 10:34:10 AM | Computer Name = WXP-WS01 | Source = MPSampleSubmission | ID = 5000

    Description = EventType mptelemetry, P1 80070424, P2 beginsearch, P3 search, P4

    3.0.8107.0, P5 mpsigdwn.dll, P6 3.0.8107.0, P7 microsoft security essentials (edb4fa23-53b8-4afa-8c5d-99752cca7094),

    P8 NIL, P9 NIL, P10 NIL.

    Error - 6/25/2012 3:06:33 PM | Computer Name = WXP-WS01 | Source = Bonjour Service | ID = 100

    Description = send_msg ERROR: failed to write 275 of 275 bytes to fd 236 errno 10054

    (An existing connection was forcibly closed by the remote host.)

    Error - 6/25/2012 3:06:33 PM | Computer Name = WXP-WS01 | Source = Bonjour Service | ID = 100

    Description = 236: Could not write data to client because of error - aborting connection

    Error - 6/25/2012 3:06:33 PM | Computer Name = WXP-WS01 | Source = Bonjour Service | ID = 100

    Description = 236: DNSServiceQueryRecord stacey's\032AirPort\032Extreme._airport._tcp.local.

    (TXT)

    Error - 6/25/2012 3:44:07 PM | Computer Name = WXP-WS01 | Source = Application Hang | ID = 1002

    Description = Hanging application chrome.exe, version 19.0.1084.56, hang module

    hungapp, version 0.0.0.0, hang address 0x00000000.

    Error - 6/25/2012 9:24:56 PM | Computer Name = WXP-WS01 | Source = Bonjour Service | ID = 100

    Description = Task Scheduling Error: Continuously busy for more than a second

    Error - 6/25/2012 9:24:56 PM | Computer Name = WXP-WS01 | Source = Bonjour Service | ID = 100

    Description = Task Scheduling Error: m->NextScheduledEvent 4682515

    Error - 6/25/2012 9:24:56 PM | Computer Name = WXP-WS01 | Source = Bonjour Service | ID = 100

    Description = Task Scheduling Error: m->NextScheduledSPRetry 4682515

    Error - 6/26/2012 2:45:41 PM | Computer Name = WXP-WS01 | Source = MPSampleSubmission | ID = 5000

    Description = EventType mptelemetry, P1 80070424, P2 beginsearch, P3 search, P4

    3.0.8107.0, P5 mpsigdwn.dll, P6 3.0.8107.0, P7 microsoft security essentials (edb4fa23-53b8-4afa-8c5d-99752cca7094),

    P8 NIL, P9 NIL, P10 NIL.

    Error - 6/26/2012 8:59:00 PM | Computer Name = WXP-WS01 | Source = Application Hang | ID = 1002

    Description = Hanging application iexplore.exe, version 8.0.6001.18702, hang module

    hungapp, version 0.0.0.0, hang address 0x00000000.

    [ OSession Events ]

    Error - 3/7/2011 12:19:22 AM | Computer Name = WXP-WS01 | Source = Microsoft Office 12 Sessions | ID = 7001

    Description = ID: 3, Application Name: Microsoft Office PowerPoint, Application

    Version: 12.0.6500.5000, Microsoft Office Version: 12.0.6425.1000. This session

    lasted 35 seconds with 0 seconds of active time. This session ended with a crash.

    [ System Events ]

    Error - 6/21/2012 10:00:38 PM | Computer Name = WXP-WS01 | Source = Service Control Manager | ID = 7034

    Description = The Error Reporting Service service terminated unexpectedly. It has

    done this 1 time(s).

    Error - 6/22/2012 1:51:26 PM | Computer Name = WXP-WS01 | Source = Service Control Manager | ID = 7011

    Description = Timeout (30000 milliseconds) waiting for a transaction response from

    the stisvc service.

    Error - 6/22/2012 1:51:57 PM | Computer Name = WXP-WS01 | Source = Service Control Manager | ID = 7011

    Description = Timeout (30000 milliseconds) waiting for a transaction response from

    the stisvc service.

    Error - 6/23/2012 10:06:45 AM | Computer Name = WXP-WS01 | Source = Microsoft Antimalware | ID = 2001

    Description = %%860 has encountered an error trying to update signatures. New Signature

    Version: Previous Signature Version: 1.127.2172.0 Update Source: %%859 Update Stage:

    %%852 Source Path: Default URL Signature Type: %%800 Update Type: %%803 User: NT AUTHORITY\SYSTEM

    Current

    Engine Version: Previous Engine Version: 1.1.8403.0 Error code: 0x80070424 Error

    description: The specified service does not exist as an installed service.

    Error - 6/23/2012 10:03:29 PM | Computer Name = WXP-WS01 | Source = Microsoft Antimalware | ID = 2001

    Description = %%860 has encountered an error trying to update signatures. New Signature

    Version: Previous Signature Version: 1.129.338.0 Update Source: %%859 Update Stage:

    %%852 Source Path: Default URL Signature Type: %%800 Update Type: %%803 User: NT AUTHORITY\SYSTEM

    Current

    Engine Version: Previous Engine Version: 1.1.8502.0 Error code: 0x80070424 Error

    description: The specified service does not exist as an installed service.

    Error - 6/24/2012 3:16:18 AM | Computer Name = WXP-WS01 | Source = Microsoft Antimalware | ID = 2001

    Description = %%860 has encountered an error trying to update signatures. New Signature

    Version: Previous Signature Version: 1.129.338.0 Update Source: %%859 Update Stage:

    %%852 Source Path: Default URL Signature Type: %%800 Update Type: %%803 User: NT AUTHORITY\SYSTEM

    Current

    Engine Version: Previous Engine Version: 1.1.8502.0 Error code: 0x80070424 Error

    description: The specified service does not exist as an installed service.

    Error - 6/25/2012 2:39:14 AM | Computer Name = WXP-WS01 | Source = Service Control Manager | ID = 7000

    Description = The MCSTRM service failed to start due to the following error: %%2

    Error - 6/25/2012 10:25:34 AM | Computer Name = WXP-WS01 | Source = BROWSER | ID = 8032

    Description = The browser service has failed to retrieve the backup list too many

    times on transport \Device\NetBT_Tcpip_{948BA608-EFDF-4587-B020-D394CBC53BE7}. The

    backup browser is stopping.

    Error - 6/25/2012 10:33:57 AM | Computer Name = WXP-WS01 | Source = Microsoft Antimalware | ID = 2001

    Description = %%860 has encountered an error trying to update signatures. New Signature

    Version: Previous Signature Version: 1.129.338.0 Update Source: %%859 Update Stage:

    %%852 Source Path: Default URL Signature Type: %%800 Update Type: %%803 User: NT AUTHORITY\SYSTEM

    Current

    Engine Version: Previous Engine Version: 1.1.8502.0 Error code: 0x80070424 Error

    description: The specified service does not exist as an installed service.

    Error - 6/26/2012 2:45:40 PM | Computer Name = WXP-WS01 | Source = Microsoft Antimalware | ID = 2001

    Description = %%860 has encountered an error trying to update signatures. New Signature

    Version: Previous Signature Version: 1.129.338.0 Update Source: %%859 Update Stage:

    %%852 Source Path: Default URL Signature Type: %%800 Update Type: %%803 User: NT AUTHORITY\SYSTEM

    Current

    Engine Version: Previous Engine Version: 1.1.8502.0 Error code: 0x80070424 Error

    description: The specified service does not exist as an installed service.

    < End of report >

    mbam-log-2012-06-26 (20-17-09).txt

    Extras2.Txt

    OTL2.Txt